Just now noticed what appears to be a hole in the audit process. We've been adding user to the Orion Login page using NT Domain groups. From what I'm seeing there is no way to see what individual nt domain login under the group logged in. Orion just show that someone in the group logged in. This is pretty much a security hole in that whomever owns the NT Domain group could add someone that is not authorized and that login would be hidden from the Orion audit page. So this needs to be fixed. Also the audit info needs to be a bit more full featured, such as log on and log off times and possibly any RW functions that were performed such as changes to the nodes or interfaces
